Apikey
What
Api key is for projects, authentication for users. https://cloud.google.com/endpoints/docs/openapi/when-why-api-key (opens in a new tab)

It provides project authorization
- Identity (identify the application that is making the call)
- Authorization (identify the permission of the application that is making the call)
Can
- block anonymous traffic
- rate limiting
- identify call patterns
- filter logs by api keys
Can't
- authenticating users
- secure authorization